CVE-2024-12228

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. Affected is an unknown function of the file /admin/user-search.php. The manipulation of the argument search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
PHPGurukul	Complaint Management System	1.0
phpgurukul	complaint_management_system	1.0

References

https://github.com/PunyHunter/CVE/issues/2Exploit, Third Party Advisory
https://phpgurukul.com/Product
https://vuldb.com/?ctiid.286974Permissions Required, VDB Entry
https://vuldb.com/?id.286974Third Party Advisory, VDB Entry
https://vuldb.com/?submit.455059Third Party Advisory, VDB Entry

Timeline

Published: Dec 5, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-122299.8A vulnerability classified as critical was found in PHPGurukul Complaint Management System 1.0. Affected by this vulnerability is an unknown CVE-2024-12234.8This vulnerability potentially allows unauthorized enumeration of information from the embedded device APIs. An attacker must already have e CVE-2024-122309.8A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 1.0. Affected by this issue is s CVE-2024-122319.8A vulnerability, which was classified as critical, was found in CodeZips Project Management System 1.0. This affects an unknown part of the CVE-2024-122326.1A vulnerability has been found in code-projects Simple CRUD Functionality 1.0 and classified as problematic. This vulnerability affects unkn CVE-2024-122339.8A vulnerability was found in code-projects Online Notice Board up to 1.0 and classified as critical. This issue affects some unknown process CVE-2024-122349.8A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been classified as critical. Affected is an unknown CVE-2024-122358.8A vulnerability was found in Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 1.0.0. It has been declared as critical. Affected CVE-2024-122365.5A security issue exists in Vertex Gemini API for customers using VPC-SC. By utilizing a custom crafted file URI for image input, data exfilt CVE-2024-122374.3The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to,CVE-2024-122386.3The The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to arbitrary shortcode execution in al CVE-2024-122396.1The PowerPack Lite for Beaver Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the navigate parameter in all